qcow2: Check header_length (CVE-2014-0144)
authorKevin Wolf <kwolf@redhat.com>
Wed, 26 Mar 2014 12:05:41 +0000 (13:05 +0100)
committerStefan Hajnoczi <stefanha@redhat.com>
Tue, 1 Apr 2014 12:19:09 +0000 (14:19 +0200)
commit24342f2cae47d03911e346fe1e520b00dc2818e0
treead752d79da8c1d45c927860ce715602bc1dd5e5c
parent6d4b9e55fc625514a38d27cff4b9933f617fa7dc
qcow2: Check header_length (CVE-2014-0144)

This fixes an unbounded allocation for s->unknown_header_fields.

Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
block/qcow2.c
tests/qemu-iotests/080 [new file with mode: 0755]
tests/qemu-iotests/080.out [new file with mode: 0644]
tests/qemu-iotests/group